DoD Gets Serious About DFARS Compliance
Date: 2019-02-13
Author: Joakim Thorén, CEO
It’s been more than a year since the U.S. Department of Defense (DoD) insisted companies working with the U.S. comply with its data security guidelines. Specifically, suppliers, contractors and any vendor working with the DoD must follow the mandate, known as the Defense Federal Acquisition Regulation Supplement (DFARS).
Now, the DoD is warning suppliers and contractors not in compliance with DFARS that they risk losing their government contracts. While an alarm bell has sounded, it’s still not too late to comply.
A key provision of the 14 issues identified by DFARS relates to accurately identifying anyone accessing CUI data (access controls). Contractors, suppliers and others must be able to show they have a security system plan that includes, among other things, information about their access management. To learn more, visit the National Institute of Standards and Technology site and view special publication 800-171 which addresses the protection of CUI.
A key technology that solves the issue of controlling system access so only authorized personnel, devices, transactions and the like have access is virtual smart cards, or VSCs, which allow companies working with the government (and in the private sector as well) to quickly, cost effectively and easily implement strong authentication.
To better understand how Versasec is helping contractors become compliant with DFARS and how we can help your organization become compliant as well, reach out to us here: support and click on the “chat” button.
vSEC:CMS
Our product suite provides all the software tools to administrate and manage credentials in a secure and convenient way.
Free Product Trial
Versasec provides enabling IT security products centered on the usage of security devices such as smart cards. Our solutions enable customers to securely authenticate, issue and manage user credentials more cost effectively. Get a free product trial.
Job Openings
We are always looking for new exceptional persons to join our team! Find out more about our job openings.
Versasec Support
Versasec customers with an existing support and maintenance contract can access the Versasec Support Portal, offering extensive professional support and maintenance services. The Versasec Support Portal offers a variety of services, allowing for customers and any site visitor to communicate directly with support engineers.
Company Blog
Our blog addresses the latest security trends and stories. The posts discuss how identity and access management are playing a larger role in keeping corporate data safe as well as brand reputations intact.